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• Eleven individuals were injured by fire and flying debris when a propane tank on a food 
truck exploded while it was parked in the Feltonville section of Philadelphia July 1 . - 
WCAU 10 Philadelphia (See item 14) 

• Federal authorities announced July 1 that six members of the Fos Angeles County Sheriffs 
Department were convicted of obstructing a federal investigation into violence against 
inmates in county jails. - Southern California City News Service (See item 2 ^ 

• Kaspersky stated that the takedown by Microsoft of several domains belonging to the No- 
IP Internet service also disrupted in some form the operations of around 25 percent of 
advanced persistent threat (APT) groups the company is tracking. - SC Magazine (See item 

• A Texas woman pleaded guilty June 30 to her role in an international shoplifting ring that 
used oversized bags to steal millions of dollars’ worth of merchandise from stores in Texas, 
Canada, and Australia. - Reuters (See item 35) 
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Energy Sector 



1. July 2, Columbia County News-Times - (Georgia) Leaking fuel tanker leads to 
evacuations. A semi-truck transporting fuel hit a pole in the parking lot of a gas station 
in an Evans subdivision June 30, prompting several businesses to evacuate when 1,200 
gallons of gasoline leaked onto the ground. A HAZMAT team contained and cleaned 
up the spill. 

Source: http://newstimes.augusta.eom/news/2014-07-02/leaking-fuel-tanker-leads-to- 
evacuations 

2. July 2, WWJ 62 Detroit - (Michigan) DTE Energy: Power could be off until 
Thursday. DTE Energy crews worked to restore power to the remaining 42,000 
customers in the metro Detroit area July 2 after severe storms July 1 knocked out 
service to 142,000 customers. About 800 power lines were brought down and officials 
stated that it could take until July 3 to restore all connections. 

Source: http://detroit.cbslocal.eom/2014/07/02/dte-energv-power-could-be-off-until- 
thursday/ 

r Return to top i 

Chemical Industry Sector 

3. July 1, McAlester News-Capital - (Oklahoma) US 69 traffic diverted for spill 
cleanup. Unidentified water treatment chemicals spilled from the trailer of a semi-truck 
into a ditch along a portion of U.S. Route 69 near McAlester June 30 after the driver 
rear-ended a vehicle and the load in the semi-truck shifted. Southbound traffic was 
diverted while crews cleaned the scene. 

Source: http://www.mcalesternews.com/local/xl760119388/US-69-traffic-diverted-for- 
spill-cleanup 

r Return to top i 

Nuclear Reactors, Materials, and Waste Sector 

4. July 1, Associated Press - (Nebraska) Hail causes roughly $5M damage at nuke 
plant. Omaha Public Power District stated that a June 3 storm that produced large hail 
and high winds caused around $5 million in damage to the Port Calhoun nuclear power 
plant by damaging the administration building’s roof, breaking windows, and damaging 
utility vehicles and rooftop air conditioning units. The plant’s operations were not 
affected. 

Source: http://www.timesunion.com/news/article/Hail-causes-roughlv-5M-damage-at- 
nuke-plant-559308 1 .php 
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Critical Manufacturing Sector 



5. July 2, U.S. Consumer Product Safety Commission - (International) Porter-Cable 
fixed-base production routers recalled due to electrical shock hazard. Porter-Cable 
announced a recall of around 107,800 fixed-base routers and router bases in the U.S. 
and Canada due to the router base handles lacking insulation, posing an electrical shock 
hazard. 

Source: http://www.cpsc.gov/en/Recalls/2014/Porter-Cable-Fixed-Base-Production- 
Routers-Recalled/ 

6. July 1, WRTV 6 Indianapolis - (Indiana) 1 dead, several injured in Marion GM 
explosion. One person was killed and five were injured July 1 at a General Motors 
metal-stamping plant in Marion after an explosion involving a chlorine dioxide tank. 
The chemical continued to spill after the explosion and a HAZMAT team was called to 
contain the spill and rinse any workers who may have been exposed to the chemical. 
Source: http://www.theindvchannel.com/news/local-news/explosion-reported-at- 
marion- gm-plant 

7. July 1, Autoblog - (International) Chrysler recalling 700k minivans and Dodge 
Journey for ignition switch woes. Chrysler announced recalls for around 695,957 
model year 2008-2010 Chrysler Town & Country and Dodge Grand Caravan vehicles 
and model year 2009-2010 Dodge Journey vehicles due to faulty wireless ignition node 
detent rings in the vehicles’ ignition switches which could cause the vehicles to slip 
from “run” into “accessory” mode, shutting down the car. Chrysler stated that 525,206 
of the affected vehicles are in the U.S. 

Source: http://www.autoblog.eom/2014/07/01/chrvsler-minivan-dodge-iournev- 
ignition-switch-recall/ 

8. July 1, U.S. Attorney 's Office, Western District of Missouri - (Missouri) Kansas City 
woman indicted in $3 million fraud scheme that forced employer into bankruptcy. 
A Kansas City, Missouri certified public accountant was indicted July 1 on charges that 
she allegedly created unauthorized Automated Clearing House (ACH) transactions and 
loan documents to defraud her employer, Galvmet Inc., and Missouri Bank & Trust of 
around $3 million between 2004 and 2014. Prosecutors allege that the fraud caused the 
company to go into bankruptcy and cease operations in 2014. 

Source: http://www.fbi.gov/kansascitv/press-releases/2014/kansas-city-woman- 
indicted-in-3-million-fraud-scheme-that- forced-employer- into-bankruptcy 
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Defense Industrial Base Sector 

Nothing to report 
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Financial Services Sector 



9. July 2, WMAZ 3 Macon - (Georgia) 16 people arrested in Macon racketeering 
investigation. Sixteen suspects were arrested in Macon as part of a joint federal 
investigation into an alleged identity theft scheme that used stolen credentials from 
hundreds of victims to add funds to Bibb County Jail and Georgia Department of 
Corrections prisoner’ accounts. Authorities believe many of the suspects are associated 
with the Crips street gang and six suspects are still being sought. 

Source: http ://w w w . 1 3 wmaz . com/story/ne ws/local/macon/20 1 4/07 /02/rico- 
investigation-nets- 1 6-macon-arrests/l 20 1 0377/ 

10. July 1, Reuters - (National) HSBC settles U.S. fraud charges over foreclosure fees. 
HSBC agreed July 1 to pay $10 million to settle charges that the bank overcharged the 
Federal Housing Administration and Fannie Mae for foreclosure-related fees on 
federally-backed home loans between 2009 and 2010. 

Source: http://www.reuters.eom/article/2014/07/01/us-hsbc-settlement-foreclosures- 
idUSKBN0F64GQ20140701 

11. July 1, BankInfoSecurity - (National) POS vendor: Possible restaurant breach. 
Vancouver, Washington -based point of sale (POS) vendor Information Systems & 
Supplies notified restaurant customers June 12 that it experienced a LogMeIn remote- 
access compromise three times between February and April, potentially exposing the 
payment card data of the restaurants’ customers who used the POS devices. 

Source: http://www.bankinfosecuritv.com/pos-vendor-possible-restaurant-breach-a- 
7009/op-l 

12. July 1, WFLD 32 Chicago - (Illinois) FBI offers $5K reward for ‘No Boundaries 
Bandit’. The FBI announced a reward for information leading to the arrest of a suspect 
known as the “No Boundaries Bandit” wanted in connection with at least seven bank 
robberies in the Chicago area since May 16. The most recent robbery associated with 
the suspect occurred June 24 at a Chase Bank branch in Chicago. 

Source: http://www.mvfoxchicago.com/storv/25918468/fbi-offers-5k-reward-for-no- 
boundaries-bandit 



For additional stories, see items 8 and 31 
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Transportation Systems Sector 

13. July 2, Associated Press - (California) Rain on a plane: leak forces flight’s 

turnaround. A Melbourne, Australia-bound Qantas Airways flight returned to Los 
Angeles International Airport shortly after takeoff July 1 when water began flowing 
down the aisles and onto passengers seated in the lower deck. Authorities are 
investigating the cause of the leak and stated that there were no safety concerns during 
the flight. 

Source: http://www.sfgate.com/news/world/article/Water-leak-forces-flight-to-return- 
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to-Los-Angeles-5595008.php 
For additional stories, see items 3, W, and 17 
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Food and Agriculture Sector 

14. July 2, WCAU 10 Philadelphia - (Pennsylvania) 12 hurt, 2 critical in food truck 
explosion. Eleven individuals were injured by fire and flying debris when a propane 
tank on the La Parrillada Chapina food truck exploded while it was parked in the 
Feltonville section of Philadelphia July 1. Nearby roadways were blocked off for 
several hours while police investigated the cause of the explosion. 

Source: http://www.nbcphiladelphia.com/news/local/Auto-Bodv-Shop-Explodes-in- 
Feltonville-265446241 .html 

15. July 2, University of Arkansas Division of Agriculture - (Arkansas) 75,000 acres of 
Arkansas farmland flooded. The Arkansas Agriculture Department reported July 1 
that at least 75,000 acres of row crops in 5 counties were flooded due to heavy rainfall 
during the weekend of June 28. Soybean crop was the most significantly impacted, 
while the flooding also affected rice, cotton, com, and grain sorghum. 

Source: http://www.arkansasmatters.com/storv/d/storv/75000-acres-of-arkansas- 
farmland-flooded/24496/ 600Ta2YPEqPsdtfrv 8b w 

16. July 1, Associated Press - (Michigan) Quarantine aims to block invasive fir- 
attacking bug. The Michigan Department of Agriculture and Rural Development 
issued a preemptive quarantine on shipments of fir nursery stock and fir timber 
products from States that are infested with balsam wooly adelgid in an effort to protect 
the State’s 14 million fir trees from the invasive insect. 

Source: 

http://www.lansingstateioumal.eom/viewart/20140701/NEWS02/307010065/Quarantin 

e-aims-block-invasive-fir-attacking-bug 

17. July 1, WBZ 4 Boston - (Massachusetts) Truck carrying $100,000 of lobster slams 
into Westwood bridge. About 7,000 pounds of lobster worth an estimated $100,000 
was discarded after the semi-tmek transporting it struck an MBTA rail bridge in 
Westwood and an air-conditioner compressor near the roof of the semi-tmek caught 
fire July 1. MBTA service was halted for about 3 hours until inspectors deemed the 
bridge as safe. 

Source: http://boston.cbslocal.eom/2014/07/01/truck-crashes-into-mbta-rail-bridge-in- 
westwood-catches-fire/ 

18. June 30, Food Poisoning Bulletin - (Washington) Raw milk, cream recalled for 
possible E. coli contamination. Dungeness Valley Creamery issued a recall for raw 
milk and cream products due to possible E. coli contamination after State inspectors 
discovered the bacteria in samples taken from the creamery. The products list an 
expiration date of July 2 and are sold in Washington. 
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Source: http://foodpoisoningbulletin.com/2014/raw-milk-cream-recalled-for-possible- 
e-coli-contamination/ 



For another story, see item 11 
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Water and Wastewater Systems Sector 

19. July 2, San Mateo Daily Journal - (California) Millions of gallons of water leaking 
into Bay: San Francisco Public Utilities Commission leaves broken pipe for years, 
system upgrades nearing completion. A pipe south of the Dumbarton Bridge will 
continue to leak an average of 25 gallons of fresh water per minute until the San 
Francisco Public Utilities Commission completes its Bay Tunnel Project in October as 
part of a $4.6 billion regional system upgrade. Officials determined that taking the pipe 
out of service will be more cost-effective and safer than repairing it. 

Source: http://www.smdailvjournal.eom/articles/lnews/2014-07-02/millions-of-gallons- 
of-water-leaking-into-bay-san-francisco-public-utilities-commission-leaves-broken- 
pipe-for-vears-svstem-upgrades-nearing-completion/1776425 125934.html 

20. July 1, Iowa City Press-Citizen - (Iowa) Tiffin under boil order through Thursday. 
Residents of Tiffin, Iowa, were placed under a boil order July 1 through July 3 after a 
water main blew apart while contractors were tapping the main in a subdivision. City 
officials are awaiting test results to confirm if coliform bacteria is present in the water. 
Source: http://www.press-citizen.eom/storv/news/local/2014/07/01/tiffin-under-boil- 
order-through-thursday/ 11906709/ 

[ Return to top] 

Healthcare and Public Health Sector 

Nothing to report 
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Government Facilities Sector 

21. July 2, KNTV 11 San Jose - (California) Pope Valley Fire in Napa County at 3,200 
acres, 30% contained. Crews reached 30 percent containment July 2 of the 3,200-acre 
Pope Valley Fire burning in Napa County. About 180 mandatory evacuations were 
ordered for several counties including Sonoma, Marin, and Contra Costa, while 280 
structures remained threatened. 

Source: http://www.nbcbavarea.com/news/local/Pope-Vallev-Fire-in-Napa-County-at- 
3200-Acres-30-Contained-2655327 1 1 .html 

22. July 2, Albuquerque Journal - (New Mexico) Diego Fire grows to 3,635 acres. Crews 
worked to contain the 3,635-acre Diego Fire burning in the Santa Fe National Forest 
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and private land July 2. Voluntary evacuation orders were issued for several 
surrounding areas and full containment was expected by July 10. 

Source: http://www.abqiournal.com/424018/news/diego-fire-2.html 

23. July 1, KWU 5 Henderson - (Nevada) Power outage prompts closure of 2 state 
offices. The Nevada Housing Division and the Mortgage Lending Division in the 
McCarran Center were closed July 1 after construction crews dug into a power line and 
knocked out power. Utility crews worked to repair the line and the State offices were 
expected to reopen July 2. 

Source: http://www.fox5vegas.com/storv/25917805/power-outage-prompts-closure-of- 
2-state-offices 



For another story, see item 10 



[ Return to top ] 

Emergency Services Sector 

24. July 2, Southern California City News Service - (California) 6 in Los Angeles County 
Sheriff’s Department convicted in federal jail probe. Federal authorities announced 
July 1 that six members of the Los Angeles County Sheriffs Department were 
convicted of obstructing a federal investigation into violence against inmates in county 
jails. The individuals conspired to transfer and rebook a federal informant in the jail 
and hide him from his FBI handlers in order to prevent him from testifying in court. 
Source: http://www.dailvnews.eom/government-and-politics/20140701/6-in-los- 
angeles-county-sheriffs-department-convicted- in-federal-jail-probe 

25. July 1, Syracuse Post-Standard - (New York) Minetto fire chief charged with misuse 
of $20,000 of department funds. The fire chief for the Minetto Fire Department was 
arrested and charged July 1 with misusing $20,000 in department funds after he 
allegedly used the department’s debit and credit cards to make personal purchases by 
claiming unneeded items were sold to the department while he received payments for 
the items. 

Source: 

http://www.svracuse.com/news/index.ssf/2014/07/volunteer fire chief charged with 
misuse of 20000 of department funds.html 

For another story, see item 9 
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Information Technology Sector 

26. July 2, IDG News Service - (International) Critical flaw in WordPress newsletter 
plug-in endangers many blogs. Researchers with Sucuri identified a vulnerability in 
the MailPoet (formerly wysija-newsletters) plugin for WordPress that could allow 
attackers to take control of sites using the plugin. The vulnerability was patched July 1 
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in an update for MailPoet and all users were advised to upgrade as soon as possible. 
Source: 

http://www.computerworld.eom/s/article/9249519/Critical flaw in WordPress newsle 
tter plug in endangers many blogs 

27. July 2, The Register - (International) MONSTER COOKIES can nom nom nom 
ALL THE BLOGS. A security researcher identified and reported a method that could 
be used to prevent users from accessing Web sites by setting cookies with header 
values so large that they trigger Web server errors. The researcher demonstrated the 
attack against the Google Blog Spot network and showed that users given the altered 
cookies were not able to see any blogs on the service. 

Source: 

http://www.theregister.co.uk/2014/07/02/monster cookies can nom nom nom all th 
e blogs/ 

28. July 2, SC Magazine - (International) MS No-IP takedown hits 25% of APT 
attackers. Kaspersky stated that the takedown by Microsoft of several domains 
belonging to the No-IP Internet service also disrupted in some form the operations of 
around 25 percent of advanced persistent threat (APT) groups the company is tracking. 
Microsoft also stated that service was restored to legitimate customers July 1, however 
No-IP stated that domains were still experiencing outages July 2 

Source: http://www.scmagazineuk.com/ms-no-ip-takedown-hits-25-of-apt- 
attackers/article/35902 1/ 



29. July 2, The - (International) Redmond’s EMET defense tool disabled by 

exploit torpedo. Researchers with Offensive Security demonstrated how an exploit 
code can be uploaded which disables and bypasses version 4.1 of Microsoft’s Enhanced 
Mitigation Toolkit (EMET) security tool. 

Source: 

http://www.theregister.co.uk/2014/07/02/redmonds emet defense tool disabled by e 
xploit torpedo/ 

30. July 1, Help Net Security - (International) Number and diversity of phishing targets 
continues to increase. The Anti-Phishing Working Group (APWG) released a report 
on phishing during the first quarter of 2014 and found that the number of phishing sites 
increased by 10.7 percent over the previous quarter, among other findings. 

Source: http ://w w w . net- security .or g/sec world . php?id= 17070 

31. July 1, Help Net Security - (International) Geodo infostealer gets help from worm. A 
security researcher identified a new version of the Cridex information-stealing malware 
known as Geodo that works in conjunction with a worm to spread. The researcher 
found that the malware is completely new code but uses the same botnet, command and 
control infrastructure, and distribution mechanisms as the previous Eeodo version of 
Cridex. 

Source: http://www.net-securitv.org/malware news. php?id= 2799 
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32. July 1, IDG News Service - (International) Microsoft boosts anti-snooping protection 
in Outlook.com, OneDrive. Microsoft announced that it added encryption protection 
to its Outlook.com webmail service and OneDrive cloud storage service in order to 
better protect users’ privacy. 

Source: 

http://www.computerworld.eom/s/article/9249490/Microsoft boosts anti snoo 
ping protection in Outlook.com OneDrive 

33. July 1, Help Net Security - (International) Facebook SDK flaw allows unauthorized 
access to Facebook accounts. Metaintell researchers identified a vulnerability in the 
Facebook SDK for Android and iOS that could allow an attacker to compromise users’ 
Facebook accounts due to insecure storage of the Facebook Access Token. The 
vulnerability is present in 31 of the top 100 Android apps and 71 of the top 100 iOS 
apps. 

Source: http ://w w w . net- security .or g/sec world . php ?id= 17074 
For another story, see item 11 



Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Weh site: http://www.it-isac.org 
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Communications Sector 

Nothing to report 
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Commercial Facilities Sector 

34. July 2, KIRO 7 Seattle - (Washington) Five injured in Mt. Vernon apartment lire. A 
July 2 fire at the Cascade West Apartments in Mount Vernon, Washington, displaced 
about 250 residents and injured 5 individuals, including one police officer. The cause of 
the fire is under investigation. 

Source: http://www.komonews.eom/news/local/200-displaced-5-injured-in-Mount- 
Vemon-apartment-fire-265532561.html 

35. July 1, Reuters - (International) Texas woman sentenced for million dollar 
shoplifting ring. A Texas woman pleaded guilty June 30 to her role in an international 
shoplifting ring that used oversized bags to steal millions of dollars’ worth of 
merchandise from stores in Texas, Canada, and Australia, then sold the products 
through online stores. 
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Source: http://www.reuters.eom/article/2014/07/01/us-usa-crime-texas-shoplifting- 
idUSKBN0F65FR20 140701 



36. July 1, Door County Advocate - (Wisconsin) Fire destroys Harbor Place Shoppes in 
Sturgeon Bay. Officials are investigating the cause of a Julyl fire at the Harbor Place 
Shoppes in Sturgeon Bay that rendered the building, which held a church, art gallery, 
transportation service, and restaurant, a total loss. 

Source: http://www.greenbavpressgazette.com/storv/news/local/door- 
county/ne w s/20 1 4/07 /0 1 /fire- destroys -harbor-place- shoppes/ 11885555/ 
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Dams Sector 

37. July 2, Cedar Valley Daily Times - (Iowa) Repairs to begin at Heery Woods Dam in 
August. The Butler County Conservation Board pledged July 1 to repair and restore a 
dam across the Shell Rock River at Heery Woods Park as soon as water levels drop. 

The $20,000 project will fix the damage caused by the aging structure of the dam and 
flood debris. 

Source: 

http://www.communitvnewspapergroup.com/waverly newspapers/news/article b09d5f 
8a-01ea-lle4-9323-0019bb2963f4.html 

38. July 1, WKTV 2 Utica - (New York) Copper thief strikes again at Canal 
Corporation. The Utica Police Department is investigating after about 500 pounds of 
copper wiring worth more than $15,000 was stolen from the New York State Canal 
Corporation. 

Source: http://www.wktv.eom/news/local/Copper-thief-strikes-again-at-Canal- 
Corporation-26543703 1 .html 
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Contact DHS 

To report physical infrastructure incidents or to request information, please contact the National Infrastructure 
Coordinating Center at nicc@hq.dhs.gov or (202) 282-9201. 

To report cyber infrastructure incidents or to request information, please contact US-CERT at soc@us-cert.gov or visit 
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